ropshell> use d7eef2c46a9880f21be01511024b53ab (download)
name         : MSCOMCTL.OCX (i386/PE)
base address : 0x27581000
total gadgets: 20271

ropshell> suggest "load reg"
> 0x27590da4 : pop eax; ret
> 0x2758bfc7 : pop ebx; ret
> 0x2759499c : pop ecx; ret
> 0x2758ad32 : pop esi; ret
> 0x275dd158 : pop edi; ret
> 0x2758b26a : pop ebp; ret
> 0x27584cca : pop edx; daa ; ret
> 0x27589242 : pop esp; daa ; ret
> 0x275b4556 : popal ; add [eax], eax; ret 8
> 0x275ab92e : mov eax, [esp + 4]; ret 0xc
> 0x275edafb : mov ecx, [esp + 4]; mov [ecx + 8], eax; ret 8
> 0x275de396 : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret
> 0x275f160b : mov ebx, [esp + 0x14]; push esi; push 0; push ebx; call ebp
> 0x275e9fb3 : mov edi, [esp + 0x10]; mov [edi], eax; call esi
> 0x275ab35c : mov esi, [esp + 0x10]; push esi; mov eax, [esi]; call [eax + 4]